This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/1ccbfd-a651-4c8e-9d60-ebbbb444286e/1/3l428Vn1dpiPtOUdQQG7hdDQyYM.mft File: 3l428Vn1dpiPtOUdQQG7hdDQyYM.mft (raw, json) Hash identifier: oRjfQ3xxs8LfRpZuaoU7CIBLUleVSyGaAug3Z1EGiHk= Subject key identifier: 02:3D:5E:AA:7D:FA:E0:8A:11:16:1A:BD:59:BF:59:51:D2:6E:0A:02 Authority key identifier: DE:5E:36:F1:59:F5:76:98:8F:B4:E5:1D:41:01:BB:85:D0:D0:C9:83 Certificate issuer: /CN=de5e36f159f576988fb4e51d4101bb85d0d0c983 Certificate serial: 019B3AFE3844196501FF106689183DC39104 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3l428Vn1dpiPtOUdQQG7hdDQyYM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/1ccbfd-a651-4c8e-9d60-ebbbb444286e/1/3l428Vn1dpiPtOUdQQG7hdDQyYM.mft Manifest number: 118A Signing time: Sat 20 Dec 2025 09:01:37 +0000 Manifest this update: Sat 20 Dec 2025 09:01:37 +0000 Manifest next update: Sun 21 Dec 2025 09:01:37 +0000 Files and hashes: 1: 3l428Vn1dpiPtOUdQQG7hdDQyYM.crl (hash: y4ZFIkrjOQebgbz+NuEQUnYHABObgCaFGTBHCZAozv8=) 2: CXuHSCaFxVaRaAru4-iFvdd0d-g.roa (hash: po3EKI/Ie4MxQDtGyWIOYbTAnH49FsuKgvn3GW+cz7k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/1ccbfd-a651-4c8e-9d60-ebbbb444286e/1/3l428Vn1dpiPtOUdQQG7hdDQyYM.crl rsync://rpki.ripe.net/repository/DEFAULT/ed/1ccbfd-a651-4c8e-9d60-ebbbb444286e/1/3l428Vn1dpiPtOUdQQG7hdDQyYM.mft rsync://rpki.ripe.net/repository/DEFAULT/3l428Vn1dpiPtOUdQQG7hdDQyYM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:fe:38:44:19:65:01:ff:10:66:89:18:3d:c3:91:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de5e36f159f576988fb4e51d4101bb85d0d0c983 Validity Not Before: Dec 20 09:01:37 2025 GMT Not After : Dec 21 09:01:37 2025 GMT Subject: CN=023d5eaa7dfae08a11161abd59bf5951d26e0a02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:46:ea:cc:91:b8:37:1a:eb:a2:40:3a:0d:02: 56:f1:dd:8e:c3:5f:f4:88:bf:da:93:d8:b6:5a:86: 2c:70:03:c1:5c:28:f0:4b:4a:d6:21:fa:b8:67:45: 0b:3f:a5:3b:47:25:14:62:4a:24:d4:af:cb:a7:26: 60:d7:2f:1f:82:62:13:64:d8:2f:0b:f7:05:b7:4a: ae:bf:df:a8:b0:28:36:66:20:03:26:aa:c8:69:2d: 36:bb:cb:3c:f0:bd:a7:1b:1b:de:86:d0:4c:42:d8: c4:db:19:94:24:b7:7c:cf:99:0f:cd:fe:83:c7:15: 73:e1:e4:f3:bd:52:89:56:8f:51:ad:42:70:11:8a: a6:b1:90:8a:1b:ef:6a:c7:24:b7:0f:56:6c:2a:ed: 25:2a:11:65:68:27:0b:0a:d7:a8:e1:97:30:ba:23: 53:1d:bb:52:22:67:22:5a:c6:78:5f:a9:41:9f:b5: 99:30:59:26:af:5e:d6:63:30:d1:f1:5a:c7:4f:bc: e3:c3:4d:4b:cb:90:73:bc:d5:84:9e:06:2f:b6:86: a9:25:2b:41:38:86:1d:7d:36:78:60:0c:9b:0d:13: 21:30:49:5f:03:b2:6f:0c:f8:fc:db:39:e9:ee:a0: 89:f5:d2:7a:2e:80:75:05:56:2f:5a:31:e4:77:44: fd:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:3D:5E:AA:7D:FA:E0:8A:11:16:1A:BD:59:BF:59:51:D2:6E:0A:02 X509v3 Authority Key Identifier: keyid:DE:5E:36:F1:59:F5:76:98:8F:B4:E5:1D:41:01:BB:85:D0:D0:C9:83 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3l428Vn1dpiPtOUdQQG7hdDQyYM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/1ccbfd-a651-4c8e-9d60-ebbbb444286e/1/3l428Vn1dpiPtOUdQQG7hdDQyYM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/1ccbfd-a651-4c8e-9d60-ebbbb444286e/1/3l428Vn1dpiPtOUdQQG7hdDQyYM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:be:d8:e7:0c:0d:30:5f:0d:99:42:8e:e6:d9:2b:b9:e8:7f: fd:a4:4f:89:23:f1:74:d8:89:33:7a:92:a5:53:4d:83:49:6a: 54:c1:6d:a1:c4:87:43:f1:8a:88:44:11:bd:af:3f:f1:4c:f1: 2f:ab:6f:c0:8f:1a:ad:5a:0b:c5:ae:f2:86:af:01:8e:b0:69: 59:4d:8e:c2:e1:9f:1e:14:cc:8a:71:12:ac:47:78:fa:53:40: 64:fb:9d:6d:c4:df:28:4b:27:b4:f1:ef:c3:fd:71:25:b5:68: 45:f5:e1:98:7a:c0:fb:0d:4b:98:3c:21:8f:87:ad:e2:35:f0: dc:1a:e9:a0:d2:5f:b7:69:18:76:45:e6:88:ab:07:f9:01:5c: 73:41:2c:ab:33:49:b2:77:18:a2:59:68:3d:7e:df:74:99:c4: a6:cb:6b:b7:f7:dc:00:8e:14:e2:45:31:ca:70:77:88:cd:c2: 1f:4d:5c:63:1b:fb:6a:04:55:dc:2e:25:fd:5e:2d:8e:29:0b: 87:4e:f1:3f:ac:36:4d:b1:03:66:b0:07:8c:7e:c8:4f:db:04: ee:99:91:ce:1e:3c:ca:6a:ea:18:c5:e5:ea:c5:fc:17:48:ba: e4:c9:ed:40:5c:83:3d:fa:b5:58:36:f2:1d:24:09:e4:c8:5e: fe:76:f7:3a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6/jhEGWUB/xBmiRg9w5EEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRlNWUzNmYxNTlmNTc2OTg4ZmI0ZTUxZDQxMDFiYjg1ZDBk MGM5ODMwHhcNMjUxMjIwMDkwMTM3WhcNMjUxMjIxMDkwMTM3WjAzMTEwLwYDVQQD EygwMjNkNWVhYTdkZmFlMDhhMTExNjFhYmQ1OWJmNTk1MWQyNmUwYTAyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtkbqzJG4NxrrokA6DQJW8d2Ow1/0 iL/ak9i2WoYscAPBXCjwS0rWIfq4Z0ULP6U7RyUUYkok1K/LpyZg1y8fgmITZNgv C/cFt0quv9+osCg2ZiADJqrIaS02u8s88L2nGxvehtBMQtjE2xmUJLd8z5kPzf6D xxVz4eTzvVKJVo9RrUJwEYqmsZCKG+9qxyS3D1ZsKu0lKhFlaCcLCteo4ZcwuiNT HbtSImciWsZ4X6lBn7WZMFkmr17WYzDR8VrHT7zjw01Ly5BzvNWEngYvtoapJStB OIYdfTZ4YAybDRMhMElfA7JvDPj82znp7qCJ9dJ6LoB1BVYvWjHkd0T9/wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAI9Xqp9+uCKERYavVm/WVHSbgoCMB8GA1UdIwQY MBaAFN5eNvFZ9XaYj7TlHUEBu4XQ0MmDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM2w0MjhWbjFkcGlQdE9VZFFRRzdoZERReVlNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC8xY2NiZmQtYTY1MS00YzhlLTlkNjAt ZWJiYmI0NDQyODZlLzEvM2w0MjhWbjFkcGlQdE9VZFFRRzdoZERReVlNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZC8xY2NiZmQtYTY1MS00YzhlLTlkNjAtZWJiYmI0NDQyODZl LzEvM2w0MjhWbjFkcGlQdE9VZFFRRzdoZERReVlNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATL7Y5wwN MF8NmUKO5tkrueh//aRPiSPxdNiJM3qSpVNNg0lqVMFtocSHQ/GKiEQRva8/8Uzx L6tvwI8arVoLxa7yhq8BjrBpWU2OwuGfHhTMinESrEd4+lNAZPudbcTfKEsntPHv w/1xJbVoRfXhmHrA+w1LmDwhj4et4jXw3BrpoNJft2kYdkXmiKsH+QFcc0EsqzNJ sncYolloPX7fdJnEpstrt/fcAI4U4kUxynB3iM3CH01cYxv7agRV3C4l/V4tjikL h07xP6w2TbEDZrAHjH7IT9sE7pmRzh48ymrqGMXl6sX8F0i65MntQFyDPfq1WDby HSQJ5Mhe/nb3Og== -----END CERTIFICATE-----Generated at Sat Dec 20 10:34:55 2025 by rpki-client